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DATABASE SYSTEM 

CROSS-REFERENCE TO RELATED APPLICATION 

The present application claims the benefit of U.S. Provisional Patent Application 
Serial No. 60/460,992, which was filed on April 7, 2003, by Gary H. Newman and James 
W. Franklin for a GROUPING OF COMPUTERS IN A COMPUTER INFORMATION 
DATABASE SYSTEM, and is hereby incorporated herein by reference. 

BACKGROUND OF THE INVENTION 

Field of the Invention 

The invention relates generally to systems and methods of managing profile data 
for a plurality of personal computers and, more particularly, to systems and methods of 
grouping personal computer profile data. 

Background Information 

A computer profile includes computer configuration data, such as data that identi- 
fies the computer hardware and installed software. The profile may also include other 
information, such as, for example, associated software license information, performance 
data, and other user specified data. In a prior system for managing a computer informa- 
tion database that contains computer profile data, a profile group managing server man- 
ages the data according to a tree-structured grouping of the computers. The tree struc- 
ture, which is designated by the system administrator, may, for example, follow the or- 
ganizational chart of a company, with the top level node, or group, corresponding to the 
company and lower level nodes, or groups, corresponding to the various branch offices, 
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and so forth. In the example, the computers may be grouped according to IP subnets that 
correspond to the branch offices. The profile group managing server then manipulates 
the profile data to produce reports that summarize the attributes of the computers at every 
group level, with the reports for a given group including the sub-tree that has the group as 
its root. A user can then utilize the summaries that are of interest . In the example, a user 
in a particular branch office may be interested only in the information for the computers 
in that office, and thus, use the reports produced for the branch office group level. How- 
ever, a user in the company head office may be interested in the information for all of the 
company computers, and thus, use the reports produced at the company group level. One 
such computer information database management system is the BelManage system (ver- 
sion 6) produced by Belarc, Inc., of Maynard, Massachusetts, which is the Assignee of 
the current invention. 

For certain grouping methods, the prior system uses client software that is config- 
ured to explicitly specify the particular groups to which the respective computers are as- 
signed. Thus, client software which is configured for a particular group is installed on 
each computer that is included in the group. For grouping methods based on Lotus Notes 
Id, the client software uses the organizational structure of the Lotus Notes e-mail ad- 
dresses of the primary users. For other grouping methods, the prior system uses client 
software that is configured for the top level group and a group mapping database table to 
further map the computers to the various lower-level groups. 

The group mapping database table has two fields, namely, a profile value-to- 
match field that contains values of particular profile data and a group field that identifies 
the groups into which computers with matching profile data values are to be included. 
The particular data selected for use as the profile value-to-match depends on possible 
grouping methods. The grouping method may be based on administrator selected 
groupings, PC Name, Windows Login, Windows Domain or Workgroup, IP address, and 
so forth. The profile values-to-match maybe, for example, for groupings based on PC 
Name or Windows Domain the ProfileName or ComputerDomain, respectively.. Further, 
the groupings based on IP subnet may use selected higher order bits of the computer's IP 
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address as the profile value-to-match, and the administrator-selected groupings may use 
other data included in the profiles as the profile value-to-match. 

The group profile managing server determines which group a given computer 
belongs in by extracting the data of interest from the profile data received from the com- 
puter, and consulting the group mapping database table. If the extracted data matches 
any of the profile value-to-match entries in the table records, the group managing server 
includes the computer in the group listed in the first record found to contain an exact 
match. If no matching record is found, the system includes the computer in the topmost 
group. 

In the prior system the administrator changes the group assignment for selected 
computers either by re-installing properly configured client software on the respective 
selected computers or, as appropriate, by changing the applicable records in the group 
mapping database table. When the computers next send their profile data to the profile 
group managing server, the server manages the data in accordance with the newly defined 
groups. 

While the prior system works well, there is a need for a system with greater 
flexiblity to manage groups in ways that more closely follow the internal organization of 
a company and/or its computer networks. Accordingly, we have improved the BelMan- 
age system as described below. 

SUMMARY OF THE INVENTION 

The improved system manages computer profile data using primary and secon- 
dary grouping criteria. The system can thus select particular computers using the primary 
grouping criteria and then further refine the selection using otherwise unrelated secon- 
dary grouping criteria. As an example, the system may use IP addresses as the primary 
grouping criteria and domain name as the secondary grouping criteria for certain or all of 
the IP addresses. 

The system uses a group mapping database table that includes profile value-to- 
match fields for both the primary grouping and the secondary grouping criteria. In the 
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example, the table includes in the primary profile value-to-match field select numbers of 
the higher order bits of the IP address and in the secondary profile value-to-match field 
the computer domains names. To assign a computer to a group, the system extracts the 
data of interest for both the primary and the secondary grouping criteria from the profile 
data uploaded from the computer, and then queries the table for records that contain 
matching values in both fields. The entry for the secondary value to match may be set to 
NULL in a given record if there are no associated secondary grouping criteria. As dis- 
cussed in more detail below, the system selects the group for a particular computer based 
on the particular retrieved records. 

The current system also allows the administrator to specify ranges of profile val- 
ues-to-match for one or both of the primary and the secondary grouping criteria, rather 
than requiring exact matches. In the example, the administrator may specify ranges 
within which the IP addresses and/or computer domains must fall for inclusion of a com- 
puter in a particular group. To use the ranges, the group mapping database table is ex- 
panded to five fields, namely, primary low limit profile value, primary high limit profile 
value, secondary low limit profile value, secondary high limit profile value and group 
name. If the primary and/or secondary criteria require an exact match, the corresponding 
low and high limits may be set to the same values. If there are no secondary grouping 
criteria associated with a particular primary grouping range, the corresponding entries for 
the secondary low and high limit profile values are set to NULL. 

Additional grouping criteria may also be used to further refine the selection of 
computers for the groups, with additional fields for associated values-to-match or ranges 
included in the group mapping database table. 

The ways in which the computers are grouped can be readily changed by altering 
the ranges for any or all of the grouping criteria. Similarly, values or ranges for grouping 
criteria may be added to records in which the corresponding fields were set to NULL, to 
provide more flexibility in how the computers are grouped. Accordingly, the system ad- 
ministrator is not required to change large numbers of records in the group mapping data- 
base table and/or re-install configured client software in large numbers of computers to 
make the changes. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

The invention description below refers to the accompanying drawings, of which: 
Fig. 1 is a functional block diagram of a system constructed in accordance with 
the current invention; 

Fig. 2 is a group mapping database table for use by the system of Fig. 1; 

Fig. 3 is a an alternative group mapping database table for use by the system of 

Fig. 1; 

Figs. 4 and 5 are reports produced by the system of Fig. 1; and 
Fig. 6 is a flow chart of the operations of the system of Fig. 1 . 

DETAILED DESCRIPTION OF AN ILLUSTRATIVE 

EMBODIMENT 

Referring now to Fig. 1, a company operates a network 100 that includes various 
computers 10, some of which may be workstations, laptops, servers or other devices (not 
shown) that communicate over an intranet, which is denoted in the drawing by the refer- 
ence numeral 16. A server 14, which is the profile group managing server, manages a 
computer information database 18 that contains the profile data for the computers on the 
intranet 16 and any other computers (not shown) that are under company control. Here- 
inafter, all computers under the control of the company are referenced as "computers 10." 
The server 14 runs profile group management software, which is denoted in the drawing 
by the reference numeral 20. The server 14 will sometimes be referred to herein as the 
profile group manager. 

The computers 10 run client profile software that, at the respective computers, 
collects profile data and uploads the data to the profile group managing server 14. The 
client profile software is denoted in the drawing by the reference numeral 22. The profile 
group manager 14 manages the computer profile data by grouping the computers into a 
specified tree-structure of groups, based on primary and/or secondary grouping criteria. 
The profile group manager then manipulates the data to produce reports that summarize 
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the attributes of the computers in the various groups. The primary and secondary group- 
ing criteria are based on selected methods of grouping, such as IP Address, Windows 
Domain, Windows Login, PC Name and so forth. As discussed in more detail below, the 
grouping criteria may be selected essentially to correspond to the underlying organization 
of the network 1 00 and/or the company. 

Referring now also to Fig. 2, the profile group manager uses a group mapping 
database table 200 to map the computers to the appropriate group based on primary and 
secondary grouping criteria. The mapping table 200 includes three fields, namely, a 
primary profile value to match field 202, a secondary profile value to match field 203 and 
a group path field 204. The group path field 204 contains paths from the company level, 
that is, paths in which the top or company level is implied. As shown in the drawing, en- 
tries for secondary grouping criteria values may be set to NULL when there is no corre- 
sponding secondary grouping criteria associated with a given primary grouping criteria. 
To include a computer in a group, the system extracts from the uploaded profile the data 
that corresponds to the primary grouping criteria and the secondary grouping criteria. 
The system then queries the group mapping database table for records that match the ex- 
tracted data. The system also includes in the query the condition that the secondary low 
value to match may be NULL, such that NULL acts as a wildcard. The operations of the 
system are discussed in more detail below with reference to Fig. 6. 

Referring now also to Fig. 3, the primary and/or secondary grouping criteria may 
include ranges of values, such as ranges of IP addresses. Accordingly, the profile group 
manager may use a group mapping database table 300 that includes five fields 302-306. 
Two of the fields, namely, a Profile Data Low field 302 and a Profile Data High field 
303, define the range of profile values of interest that correspond to the primary grouping. 
In the example depicted in the drawing, the Profile Data Low and Profile Data High 
fields denote ranges of values for the IP addresses. The two fields Profile Data2 Low 304 
and Profile Data2 High 305 set a range for the profile values of interest that correspond to 
the secondary grouping criteria. In the example, the fields 304 and 305 denote Computer 
Domain names. As shown, the high and low values for a given grouping may be equal, 
such that the profile data of interest must be an exact match for inclusion of the computer 
in the corresponding group. Also as shown, there may be no corresponding secondary 
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criteria for certain primary grouping criteria, and the entries in secondary value fields 304 
and 305 are then set to NULL in the applicable table records. 

When a grouping method based on IP address uses high and low limits, the sys- 
tem preferably uses the entire address as the data of interest, rather than just selected most 
significant bits. In addition, the IP address is preferably formatted with leading zeros on 
the octets for use in the database query. The address commonly shown as 10.2.3.4 is 
formatted as 010.002.003.004, so that database dictionary sorting order comparisons pro- 
vide the correct numerical comparisons. Further, the low and high limits for the grouping 
should also be formatted with leading zeros. 

Referring now also to Fig. 4, a profile report 400 contains summaries of various 
profile data for the computers that are included in the sub-tree with the group West as the 
root, namely, the groups West, West/Sales, and West/Marketing. The report may instead 
be written for a lower-level group, as shown in Fig. 5. Other reports are created to sum- 
marize various other attributes of the computers at the various group levels, such as, types 
and counts of hardware devices, quantities of licensed software, and so forth. 

To provide the profile data, the client profile software 22 on a given computer 10 
collects hardware and software configuration and performance data from various regis- 
tries, files, menus and so forth. The data includes: 

- Hardware component information such as manu- 
facturer, system, BIOS, CPU, bus, memory, hard disks (lo- 
cal and shared, logical and physical), tape drives, video 
cards, sound cards, printers, network, and operating system; 

- Software version information about applications 
including manufacturer, product name, version number, 
and install directory; 

- Software License information about popular soft- 
ware packages installed on each computer, including Prod- 
uct Ids and Registration Numbers; 

- Login account list of local logins the computer 
allows and date of last login for each. 
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- Performance data such as network activity, CPU 
utilization, number of reboots, and hard drive SMART fail- 
ures; 

- Microsoft hotfixes; and 

- User Defined Entries such as name, address, 
phone number, location. 

At designated times, the client computers connect to the profile group manager 14 over 
the intranet 16 or, as appropriate, over the internet, and upload the collected data, or pro- 
files. 

Referring now also to Fig. 6, when the profile group manager receives a profile 
from a client (step 600), the profile group manager extracts data of interest based on a 
specified primary grouping method (step 602). The extracted data is referred to herein- 
after as "firstData." If no secondary grouping method is specified (step 603), the profile 
group manager queries the group mapping database table for records in which the pri- 
mary low limit is less than or equal to firstData and the primary high limit is greater than 
or equal to firstData (steps 603, 618). In response to the query, the system returns 
matching records in database order. If the query returns a single record, the profile group 
manager includes the computer in, that is, associates the profile data with, the group 
listed in the record (steps 619, 620, 624). If more than one record is returned, the profile 
group manager uses the first record found (steps 620, 622). If the query does not find any 
matching records, the profile group manager includes the computer in a default group 
(steps 619, 626). The default group may, for example, be the top level group. 

If a secondary grouping method is specified, the profile group manager extracts the 
applicable data of interest (steps 603, 604). The extracted value is referred to hereinafter 
as "secondData." The profile group manager then queries the table for records in which 
the primary low limit is less than or equal to firstData and the primary high limit is 
greater than or equal to firstData, and the secondary low limit is less than or equal to sec- 
ondData and the secondary high limit is greater than or equal to secondData. In addition, 
the profile group manager queries the table for records in which both the primary low 
limit is less than or equal to firstData and the primary high limit is greater than or equal to 
firstData and the secondary low limit is NULL or the empty string (step 606). This last 
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check allows NULL and the empty string to be used as wildcards for the secondary 
grouping criteria. 

If the query returns a single record, the profile group manager includes the com- 
puter in the group listed in the record (steps 607, 608, 616). If, however, the query re- 
turns more than one record, the profile group manager uses the first record found that has 
a secondary low limit (steps 608-610). Otherwise, if none of the returned records have 
secondary low limits, the manager uses the last record returned (steps 609, 612). The last 
record presumably includes primary grouping criteria that is set to a "catch all" range. If 
the query does not find any matching records, the system includes the computer in the 
default group (steps 607, 614). 

We further explain the system operations by way of examples. As a first exam- 
ple, a company operates its headquarters on one IP subnet and its sales and marketing di- 
visions on a second IP subnet. The group mapping database table used by the system is 
shown in Fig. 3. The profile group manager manages the network computers 10 using as 
the primary grouping criteria ranges of IP addresses and as the secondary grouping crite- 
ria computer domains. The reports thus organize the computers in the following groups: 

Company/HQ 

Company/West/sales 

Company/W est/marketing . 
As discussed, the system uses a default group for computers that do match any of the 
grouping criteria. These computers may be included in the reports as, for example, the 
group Company/ungrouped. As desired, the system may also produce separate reports 
for the two subnets and/or the two divisions, as well as for the entire company. 

In another example, the company uses several IP subnets and for each subnet the 
same set of computer domains. The subnets may, for example, operate in various facto- 
ries that each have manufacturing, sales and marketing divisions. The system again uses 
IP addresses as the primary grouping criteria and computer domain as the secondary 
grouping criteria. The profile group manager includes the computers in the groups 

Company /subnet 1/mfg 

Company/subnet 1/mkt 
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Company/subnet 1/sls 
Company/subnet 2/mfg 
Company/subnet 2/mkt 
Company/subnet 2/sls 
etc. 

In yet another example, the grouping mimics both a company's organizational 
structure and its underlying physical set up. The company uses structured PC Names that 
include three letters followed by four digits. The three letters denote the organizational 
responsibilities of the computer's user, and the numbers make the name unique. The 
three letters may be "sis" for sales, f, mkt M for marketing, and so forth. 

The PC Name is the primary grouping criteria and thus reflects the company's or- 
ganization. To provide separate groups for east and west regional sales manager and 
marketing managers, the IP Address may be used as the secondary grouping criteria. The 
profile group manager then groups the computers into 

Company/Sales/West 

Company/Sales/East 

Company/Marketing/W est 

Company/Marketing/East 
The profile group manager then produces reports organized by the company, by sales and 
marketing groups and by regional groups. As discussed, the reports for a given group 
include the sub-tree with the group as the root. The head of marketing, for example, will 
want reports for all of marketing and thus use the marketing group level, while a regional 
manager may want reports for only his region and use the regional group level. 

What is claimed is: 
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